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I sat down at the computer, ready to get back to my project. But things were not how I 
left them: instead of a website, one of my browser windows was now blank except for 
the words “762 apples” in the upper-left corner. That was weird. 


Before I’d walked away from the computer, I had been working on uploading a book 
called Secret Guide to Computers & Tricky Living to the Internet Archive. Secret Guide 
is a computer book written by Russ Walter, who self-published the first edition in 1972 
and has updated it almost every year since, up to this year’s 34th edition. The first 
edition covered mainframes and FORTRAN; it evolved though the era of 
microcomputers; the latest features contemporary tools like Windows and iPad. I had 
bought many editions directly from Walter and was, with his permission, uploading 
them. 


But that doesn’t explain the 762 apples. 


Pd uploaded a recent edition of the book to the Internet Archive, then used the 
Archive’s in-book search tool to search its text. That’s when it happened: the screen 
cleared, the book disappeared, and the mysterious “762 apples” message appeared. 


It turns out it was a JavaScript injection vulnerability. On page 603 of the book, Walter 
gave a short example of how to add numbers in JavaScript: 
<script>document.write(750+12, " apples")</script>. Internet Archive’s 
search results panel was getting a cross-site scripting attack from the text of a scanned 
book. 


I alerted the powers that be on Internet Archive’s slack. They thought it was hilarious. 
Once they stopped laughing, they fixed the bug. Russ Walter, in a book written years 
ago, inadvertently hacked the Internet Archive’s search interface. How do you like 
them apples? 


You can read many editions of Walter’s Secret Guide to Computers & Tricky Living at 
https://archive.org/details/secretguidetocomputers 
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